Hello,
you can probably set global environment variables like
http_proxy="http://@ip_proxy:8080";
https_proxy="http://@ip_proxy:8080";
So each request made by lwp perl will probably use the proxy.
For apache you can try to set in httpd.portal:
ProxyRemote * http://@ip_proxy:8080
So fingerprints update should work and proxy bypass too.
For Oauth authentication you must make a hole in the firewall and for
the network detection IP the device do the request not PacketFence.
Fabrice
Le 2014-05-07 06:44, Morris, Andi a écrit :
It's not just the fingerprints that are the issue though, I seem to remember
that proxy bypass requires that the PacketFence server can reach the website
itself, plus also the fetching of the network detection IP.
I can always add rules and NAT the request through my perimeter firewall if
needs be.
Cheers,
Andi
-----Original Message-----
From: Tim DeNike [mailto:[email protected]]
Sent: 07 May 2014 10:03
To: [email protected]
Subject: Re: [PacketFence-users] Packetfence behind a proxy server
Just wget the fingerprints file with proxy options set from command line.
Sent from my iPhone
On May 7, 2014, at 5:01 AM, "Morris, Andi" <[email protected]> wrote:
Thanks, that does help for the fingerprints, however I'd still like to know if
it is possible to configure PacketFence to sit behind a webproxy server. It's
not a massive issue if it can't, and to be honest our proxy server is going to
be taken out in the next year or so, but it would make things a little more
streamlined if it was possible now.
Cheers,
Andi
-----Original Message-----
From: Loick Pelet [mailto:[email protected]]
Sent: 06 May 2014 20:55
To: [email protected]
Subject: Re: [PacketFence-users] Packetfence behind a proxy server
Hello Andi,
I just remember that you can just download the new
dhcp_fingerprints.conf,place it in /usr/local/pf/conf and run
/usr/local/pf/bin/pfcmd reload fingerprints
It will update the db automatically.
Have good day
Loick
On May 06-10:12AM, Loick Pelet wrote:
Hello Andi,
I attached you a little how-to to update the fingerprints offline.
regards
Loick
On May 06-12:41PM, Morris, Andi wrote:
Hi all,
Is there a way I can configure packetfence to access the internet through a
proxy server? At the moment I cannot update the DHCP fingerprints, and I can
see the requests hitting my perimeter firewall rather than going through our
proxy server.
Cheers,
Andi
-------------------------------------
Andi Morris
IT Security Officer
Cardiff Metropolitan University
T: 02920 205720
E: [email protected]<mailto:[email protected]>
--------------------------------------
--------------------------------------------------------------------
---------- Is your legacy SCM system holding you back? Join Perforce
May 7 to find out:
• 3 signs your SCM is hindering your productivity •
Requirements for releasing software faster • Expert tips and
advice for migrating your SCM now http://p.sf.net/sfu/perforce
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
[email protected] :: +1.514.447.4918 (x130) ::
www.inverse.ca<http://www.inverse.ca/>
Inverse inc. :: Leaders behind SOGo
(www.sogo.nu<http://www.sogo.nu/>)
and PacketFence
+(www.packetfence.org<http://www.packetfence.org/>)
gtalk or skype : lpelet.inverse
# Update Packetfence fingerprints database offline mode # author
Loick PELET # creation 20130208 # update 20130208 # # # I assume your
INSTALL_DIR is /usr/local/pf/ # and your configuration is a
standalone Packetfence server.
#
# Download the file dhcp_fingerprints.conf from our github and #
place the file on your pf server in /tmp by scp or ftp or other file transfert
tool allowed in your network :
https://github.com/inverse-inc/fingerbank/blob/master/dhcp_fingerprin
t s.conf scp ./dhcp_fingerprints.conf root@serverpf:/tmp
# Stop packetfence service :
service packetfence stop
# Back up the old fingerprints file :
mv /usr/local/pf/conf/dhcp_fingerprints.conf
/usr/local/pf/conf/dhcp_fingerprints.conf.save
# Move the new fingerprints file in your CONF_DIR :
mv /usr/local/pf/conf/dhcp_fingerprints.conf
# Backup the old fingerprints table on mysql and flush the original:
mysql -u root -p pf
create table dhcp_fingerprint_save as select * from dhcp_fingerprint;
delete from dhcp_fingerprint;
# Then restart the packetfence service service packetfence start;
# Check if the update is ok
mysql -u root -p pf
select * from dhcp_fingerprint;
---------------------------------------------------------------------
-
-------- Is your legacy SCM system holding you back? Join Perforce
May
7 to find out:
• 3 signs your SCM is hindering your productivity •
Requirements for releasing software faster • Expert tips and
advice for migrating your SCM now http://p.sf.net/sfu/perforce
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
[email protected] :: +1.514.447.4918 (x130) ::
www.inverse.ca<http://www.inverse.ca/>
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu/>)
and PacketFence
+(www.packetfence.org<http://www.packetfence.org/>)
gtalk or skype : lpelet.inverse
----------------------------------------------------------------------
-------- Is your legacy SCM system holding you back? Join Perforce May
7 to find out:
• 3 signs your SCM is hindering your productivity •
Requirements for releasing software faster • Expert tips and
advice for migrating your SCM now http://p.sf.net/sfu/perforce
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
----------------------------------------------------------------------
-------- Is your legacy SCM system holding you back? Join Perforce May
7 to find out:
• 3 signs your SCM is hindering your productivity •
Requirements for releasing software faster • Expert tips and
advice for migrating your SCM now http://p.sf.net/sfu/perforce
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
• 3 signs your SCM is hindering your productivity • Requirements for
releasing software faster • Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce _______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
• 3 signs your SCM is hindering your productivity
• Requirements for releasing software faster
• Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
[email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
• 3 signs your SCM is hindering your productivity
• Requirements for releasing software faster
• Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
